@tweedge@cybersecurity.theater
2026-07-07 05:33 UTC
I found a super old file on my NAS back from when I was typosquatting NLTK (then in the top 250 Python packages!) with a package named NTLK. My inspiration was simple: I'd made that typo three times in a row, and so I made a package which would fail to install + give people the correct install command + send a ping telling me someone tried to install NTLK.
7 months and 28k installs later, I got a bunch of data that I forgot to write up 😅 but better late then never: https://chris.partridge.tech/2026/typosquatting-nltk-on-pypi
Replies (1)
-
@sharkfie@infosec.exchange 2026-07-07 10:54
@tweedge@cybersecurity.theater I always copy names from PyPi but made this mistake with importing an embarrassing number of times